Senior Endpoint Management Engineer

Job description

Title: Senior Endpoint Management Engineer KBR is seeking a Senior Endpoint Management Engineer to join our enterprise technology and digital workplace team. This senior engineering role is responsible for delivering secure, scalable, and modern endpoint management services across Windows, macOS, Linux, and mobile platforms. You will provide technical leadership across endpoint operations, compliance, automation, patch management, and device security while supporting enterprise-wide transformation initiatives. Partnering closely with cybersecurity, identity, cloud, infrastructure, and operational teams, you will help define and implement endpoint management standards that improve security posture, operational efficiency, and end-user experience. The successful candidate will possess deep technical expertise in Microsoft endpoint technologies and a proven ability to support large-scale enterprise environments. This is a permanent, full-time position based in Australia. Due to the nature of the work and customer requirements, candidates must be eligible to obtain and maintain an Australian Government Security Clearance. In September 2025, KBR announced that we are spinning our Mission Technology Solutions business into a separate public company. This role will ultimately be part of the new company. The Mission Technology Solutions business partners with governments and defense, intelligence, space, aviation, and critical infrastructure customers to deliver high-end engineering, science, technology, and mission support solutions. Key Responsibilities Provide senior engineering support for enterprise endpoint management platforms across servers, workstations, and mobile devices. Design and maintain endpoint compliance, patching, deployment, remediation, and configuration management solutions. Administer Microsoft Intune, including device enrolment, configuration profiles, application deployment, compliance policies, and remediation activities. Support MECM/SCCM and Microsoft co-management technologies within hybrid enterprise environments. Automate operational processes through PowerShell scripting and policy-based automation frameworks. Administer endpoints across Windows, macOS, Linux, iOS, and Android platforms. Manage endpoint lifecycle services including provisioning, deployment, upgrades, patching, and vulnerability management. Troubleshoot and resolve complex endpoint, identity, deployment, and compliance issues. Support security and compliance controls including Conditional Access, endpoint compliance enforcement, and device trust frameworks. Participate in incident, problem, risk, and change management activities. Develop and maintain operational documentation, standards, technical procedures, and support runbooks. Collaborate with cyber security, cloud, networking, and infrastructure teams to enhance endpoint capabilities and security posture. Support endpoint modernization initiatives, Microsoft 365 adoption programs, and cloud transformation projects. Drive continuous improvement, automation, and operational maturity across endpoint management practices. Provide technical guidance and mentoring to junior engineers and support teams. Basic Qualifications Education & Experience Bachelor's degree in Information Technology, Computer Science, Engineering, Information Systems, or a related discipline; or equivalent professional experience. 7+ years of experience managing and supporting enterprise endpoint environments. Experience administering Microsoft Intune, MECM/SCCM, and modern endpoint management platforms. Experience supporting enterprise Windows, macOS, Linux, and mobile device environments. Experience implementing endpoint compliance, vulnerability remediation, patch management, and device security controls. Eligibility to obtain and maintain an Australian Government Security Clearance. Skills & Competencies Strong expertise in Microsoft Intune, Endpoint Manager, and modern device management technologies. Advanced knowledge of Microsoft Windows workstation and server administration. Experience with application packaging, software deployment, and endpoint remediation. Strong PowerShell scripting and automation skills. Experience managing macOS environments including Automated Device Enrollment (ADE), update management, and application deployment. Knowledge of Linux administration, scripting, and package management. Understanding of enterprise networking concepts including TCP/IP, VLANs, DNS, and firewall technologies. Working knowledge of Microsoft Entra ID, hybrid identity, Azure administration, and Microsoft 365 platforms. Experience implementing Conditional Access, compliance policies, and endpoint security controls. Strong analytical, troubleshooting, communication, and stakeholder engagement skills. Demonstrated ability to operate effectively within complex enterprise and government-aligned environments. Preferred Qualifications Experience with Automox, Patch My PC, Microsoft Autopatch, and Windows Update for Business. Experience with Bash scripting, Ansible, and other infrastructure automation tools. Knowledge of Microsoft Azure, Azure Arc, and hybrid cloud management solutions. Experience with Microsoft Defender, Cisco ISE, Zscaler, and enterprise endpoint protection technologies. Experience supporting defence, aerospace, government, energy, transport, or critical infrastructure organisations. Familiarity with Australian Government security frameworks, the Essential Eight, ISM (Information Security Manual), and ASD cyber security guidance. Relevant certifications including Microsoft Certified: Endpoint Administrator Associate, AZ-104, Microsoft Enterprise Administrator Expert, CISSP, or equivalent certifications.